@sync-in/server 1.9.6 → 1.10.0

package/server/authentication/services/auth-methods/auth-method-two-fa.service.spec.js

@@ -6,36 +6,382 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
+const _common = require("@nestjs/common");
 const _testing = require("@nestjs/testing");
+const _time2fa = require("time2fa");
 const _notificationsmanagerservice = require("../../../applications/notifications/services/notifications-manager.service");
 const _usersmanagerservice = require("../../../applications/users/services/users-manager.service");
 const _cacheservice = require("../../../infrastructure/cache/services/cache.service");
+const _cryptsecret = require("../../utils/crypt-secret");
 const _authmethodtwofaservice = require("./auth-method-two-fa.service");
+function _getRequireWildcardCache(nodeInterop) {
+    if (typeof WeakMap !== "function") return null;
+    var cacheBabelInterop = new WeakMap();
+    var cacheNodeInterop = new WeakMap();
+    return (_getRequireWildcardCache = function(nodeInterop) {
+        return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
+    })(nodeInterop);
+}
+function _interop_require_wildcard(obj, nodeInterop) {
+    if (!nodeInterop && obj && obj.__esModule) {
+        return obj;
+    }
+    if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
+        return {
+            default: obj
+        };
+    }
+    var cache = _getRequireWildcardCache(nodeInterop);
+    if (cache && cache.has(obj)) {
+        return cache.get(obj);
+    }
+    var newObj = {
+        __proto__: null
+    };
+    var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
+    for(var key in obj){
+        if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
+            var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
+            if (desc && (desc.get || desc.set)) {
+                Object.defineProperty(newObj, key, desc);
+            } else {
+                newObj[key] = obj[key];
+            }
+        }
+    }
+    newObj.default = obj;
+    if (cache) {
+        cache.set(obj, newObj);
+    }
+    return newObj;
+}
+jest.mock('../../utils/crypt-secret');
+jest.mock('../../../common/qrcode');
 describe(_authmethodtwofaservice.AuthMethod2FA.name, ()=>{
     let service;
-    beforeAll(async ()=>{
+    let cache;
+    let usersManager;
+    let notificationsManager;
+    const mockUser = {
+        id: 1,
+        login: 'testuser',
+        email: 'test@example.com',
+        secrets: {
+            twoFaSecret: 'encrypted-secret',
+            recoveryCodes: [
+                'encrypted-code-1',
+                'encrypted-code-2'
+            ]
+        }
+    };
+    const mockRequest = {
+        user: {
+            id: 1,
+            login: 'testuser'
+        },
+        ip: '127.0.0.1',
+        headers: {
+            'user-agent': 'test-agent'
+        }
+    };
+    beforeEach(async ()=>{
         const module = await _testing.Test.createTestingModule({
             providers: [
                 _authmethodtwofaservice.AuthMethod2FA,
                 {
                     provide: _cacheservice.Cache,
-                    useValue: {}
+                    useValue: {
+                        get: jest.fn(),
+                        set: jest.fn()
+                    }
                 },
                 {
                     provide: _usersmanagerservice.UsersManager,
-                    useValue: {}
+                    useValue: {
+                        fromUserId: jest.fn(),
+                        validateUserAccess: jest.fn(),
+                        compareUserPassword: jest.fn(),
+                        updateAccesses: jest.fn().mockResolvedValue(undefined),
+                        updateSecrets: jest.fn()
+                    }
                 },
                 {
                     provide: _notificationsmanagerservice.NotificationsManager,
-                    useValue: {}
+                    useValue: {
+                        sendEmailNotification: jest.fn().mockResolvedValue(undefined)
+                    }
                 }
             ]
         }).compile();
+        module.useLogger([
+            'fatal'
+        ]);
         service = module.get(_authmethodtwofaservice.AuthMethod2FA);
+        cache = module.get(_cacheservice.Cache);
+        usersManager = module.get(_usersmanagerservice.UsersManager);
+        notificationsManager = module.get(_notificationsmanagerservice.NotificationsManager);
+        _cryptsecret.encryptSecret.mockImplementation((secret)=>`encrypted-${secret}`);
+        _cryptsecret.decryptSecret.mockImplementation((secret)=>secret.replace('encrypted-', ''));
+        const { qrcodeToDataURL } = await Promise.resolve().then(()=>/*#__PURE__*/ _interop_require_wildcard(require("../../../common/qrcode")));
+        qrcodeToDataURL.mockReturnValue('data:image/png;base64,mock');
+    });
+    afterEach(()=>{
+        jest.clearAllMocks();
     });
     it('should be defined', ()=>{
         expect(service).toBeDefined();
     });
+    describe('initTwoFactor', ()=>{
+        it('should generate secret and QR code and store in cache', async ()=>{
+            const result = await service.initTwoFactor(mockUser);
+            expect(result).toHaveProperty('secret');
+            expect(result).toHaveProperty('qrDataUrl');
+            expect(result.qrDataUrl).toBe('data:image/png;base64,mock');
+            expect(cache.set).toHaveBeenCalledWith(`auth-2fa-pending-user-${mockUser.id}`, expect.any(String), 300);
+        });
+    });
+    describe('enableTwoFactor', ()=>{
+        const enableDto = {
+            code: '123456',
+            password: 'password123',
+            isRecoveryCode: false
+        };
+        it('should throw error if secret has expired', async ()=>{
+            cache.get.mockResolvedValue(null);
+            await expect(service.enableTwoFactor(enableDto, mockRequest)).rejects.toThrow(new _common.HttpException('The secret has expired', _common.HttpStatus.BAD_REQUEST));
+        });
+        it('should throw error if verification fails', async ()=>{
+            cache.get.mockResolvedValue('encrypted-secret');
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: false,
+                message: 'Invalid code'
+            });
+            await expect(service.enableTwoFactor(enableDto, mockRequest)).rejects.toThrow(new _common.HttpException('Invalid code', _common.HttpStatus.FORBIDDEN));
+        });
+        it('should throw error if password is incorrect', async ()=>{
+            cache.get.mockResolvedValue('encrypted-secret');
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            usersManager.compareUserPassword.mockResolvedValue(false);
+            await expect(service.enableTwoFactor(enableDto, mockRequest)).rejects.toThrow(new _common.HttpException('Incorrect code or password', _common.HttpStatus.BAD_REQUEST));
+        });
+        it('should enable 2FA and return recovery codes on success', async ()=>{
+            cache.get.mockResolvedValue('encrypted-secret');
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            usersManager.compareUserPassword.mockResolvedValue(true);
+            const result = await service.enableTwoFactor(enableDto, mockRequest);
+            expect(result.success).toBe(true);
+            expect(result.recoveryCodes).toHaveLength(5);
+            expect(usersManager.updateSecrets).toHaveBeenCalledWith(mockUser.id, {
+                twoFaSecret: 'encrypted-secret',
+                recoveryCodes: expect.any(Array)
+            });
+            expect(notificationsManager.sendEmailNotification).toHaveBeenCalledWith([
+                mockRequest.user
+            ], {
+                app: 'auth_2fa',
+                event: 'Two-factor authentication (2FA) on your account has been enabled',
+                element: 'test-agent',
+                url: '127.0.0.1'
+            });
+        });
+    });
+    describe('disableTwoFactor', ()=>{
+        const disableDto = {
+            code: '123456',
+            password: 'password123',
+            isRecoveryCode: false
+        };
+        it('should throw error if verification fails', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: false,
+                message: 'Invalid code'
+            });
+            await expect(service.disableTwoFactor(disableDto, mockRequest)).rejects.toThrow(new _common.HttpException('Invalid code', _common.HttpStatus.FORBIDDEN));
+        });
+        it('should throw error if password is incorrect', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            usersManager.compareUserPassword.mockResolvedValue(false);
+            await expect(service.disableTwoFactor(disableDto, mockRequest)).rejects.toThrow(new _common.HttpException('Incorrect code or password', _common.HttpStatus.BAD_REQUEST));
+        });
+        it('should disable 2FA on success', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            usersManager.compareUserPassword.mockResolvedValue(true);
+            const result = await service.disableTwoFactor(disableDto, mockRequest);
+            expect(result.success).toBe(true);
+            expect(usersManager.updateSecrets).toHaveBeenCalledWith(mockUser.id, {
+                twoFaSecret: undefined,
+                recoveryCodes: undefined
+            });
+            expect(notificationsManager.sendEmailNotification).toHaveBeenCalledWith([
+                mockRequest.user
+            ], {
+                app: 'auth_2fa',
+                event: 'Two-factor authentication (2FA) on your account has been disabled',
+                element: 'test-agent',
+                url: '127.0.0.1'
+            });
+        });
+    });
+    describe('verify', ()=>{
+        const verifyDto = {
+            code: '123456',
+            isRecoveryCode: false
+        };
+        it('should verify 2FA code successfully', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            const result = await service.verify(verifyDto, mockRequest);
+            expect(result.success).toBe(true);
+            expect(usersManager.updateAccesses).toHaveBeenCalledWith(mockUser, mockRequest.ip, true, true);
+        });
+        it('should verify recovery code successfully', async ()=>{
+            const recoveryDto = {
+                code: 'code-1',
+                isRecoveryCode: true
+            };
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            usersManager.updateSecrets.mockResolvedValue(undefined);
+            await service.verify(recoveryDto, mockRequest);
+            expect(usersManager.updateSecrets).toHaveBeenCalled();
+        });
+        it('should fail when recovery codes are empty', async ()=>{
+            const recoveryDto = {
+                code: 'code-1',
+                isRecoveryCode: true
+            };
+            const userWithoutCodes = {
+                ...mockUser,
+                secrets: {
+                    ...mockUser.secrets,
+                    recoveryCodes: []
+                }
+            };
+            usersManager.fromUserId.mockResolvedValue(userWithoutCodes);
+            const result = await service.verify(recoveryDto, mockRequest);
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Invalid code');
+        });
+        it('should fail when recovery code does not match', async ()=>{
+            const recoveryDto = {
+                code: 'wrong-code',
+                isRecoveryCode: true
+            };
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            const result = await service.verify(recoveryDto, mockRequest);
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Invalid code');
+        });
+        it('should handle errors during recovery code validation', async ()=>{
+            const recoveryDto = {
+                code: 'code-1',
+                isRecoveryCode: true
+            };
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            usersManager.updateSecrets.mockRejectedValue(new Error());
+            const result = await service.verify(recoveryDto, mockRequest);
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Invalid code');
+        });
+        it('should return user when fromLogin is true', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({
+                success: true,
+                message: ''
+            });
+            const result = await service.verify(verifyDto, mockRequest, true);
+            expect(Array.isArray(result)).toBe(true);
+            expect(result[0].success).toBe(true);
+            expect(result[1]).toBe(mockUser);
+        });
+    });
+    describe('adminResetUserTwoFa', ()=>{
+        it('should reset user 2FA successfully', async ()=>{
+            usersManager.updateSecrets.mockResolvedValue(undefined);
+            const result = await service.adminResetUserTwoFa(1);
+            expect(result.success).toBe(true);
+            expect(usersManager.updateSecrets).toHaveBeenCalledWith(1, {
+                twoFaSecret: undefined,
+                recoveryCodes: undefined
+            });
+        });
+        it('should handle errors during reset', async ()=>{
+            usersManager.updateSecrets.mockRejectedValue(new Error('Database error'));
+            const result = await service.adminResetUserTwoFa(1);
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Database error');
+        });
+    });
+    describe('loadUser', ()=>{
+        it('should load and validate user successfully', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(mockUser);
+            const result = await service.loadUser(1, '127.0.0.1');
+            expect(result).toBe(mockUser);
+            expect(usersManager.validateUserAccess).toHaveBeenCalledWith(mockUser, '127.0.0.1');
+        });
+        it('should throw error if user not found', async ()=>{
+            usersManager.fromUserId.mockResolvedValue(null);
+            await expect(service.loadUser(1, '127.0.0.1')).rejects.toThrow(new _common.HttpException('User not found', _common.HttpStatus.NOT_FOUND));
+        });
+    });
+    describe('verifyUserPassword', ()=>{
+        it('should verify password successfully', async ()=>{
+            usersManager.compareUserPassword.mockResolvedValue(true);
+            await expect(service.verifyUserPassword(mockUser, 'password123', '127.0.0.1')).resolves.not.toThrow();
+        });
+        it('should throw error if password is incorrect', async ()=>{
+            usersManager.compareUserPassword.mockResolvedValue(false);
+            await expect(service.verifyUserPassword(mockUser, 'wrong-password', '127.0.0.1')).rejects.toThrow(new _common.HttpException('Incorrect code or password', _common.HttpStatus.BAD_REQUEST));
+            expect(usersManager.updateAccesses).toHaveBeenCalledWith(mockUser, '127.0.0.1', false, true);
+        });
+    });
+    describe('validateTwoFactorCode', ()=>{
+        it('should validate code successfully', ()=>{
+            jest.spyOn(_time2fa.Totp, 'validate').mockReturnValue(true);
+            const result = service.validateTwoFactorCode('123456', 'encrypted-secret');
+            expect(result.success).toBe(true);
+            expect(result.message).toBe('');
+        });
+        it('should fail validation for incorrect code', ()=>{
+            jest.spyOn(_time2fa.Totp, 'validate').mockReturnValue(false);
+            const result = service.validateTwoFactorCode('wrong-code', 'encrypted-secret');
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Incorrect code or password');
+        });
+        it('should return error if secret is not provided', ()=>{
+            const result = service.validateTwoFactorCode('123456', '');
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Incorrect code or password');
+        });
+        it('should handle validation errors', ()=>{
+            jest.spyOn(_time2fa.Totp, 'validate').mockImplementation(()=>{
+                throw new Error('Validation error');
+            });
+            const result = service.validateTwoFactorCode('123456', 'encrypted-secret');
+            expect(result.success).toBe(false);
+            expect(result.message).toBe('Validation error');
+        });
+    });
 });
 
 //# sourceMappingURL=auth-method-two-fa.service.spec.js.map

package/server/authentication/services/auth-methods/auth-method-two-fa.service.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../backend/src/authentication/services/auth-methods/auth-method-two-fa.service.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { NotificationsManager } from '../../../applications/notifications/services/notifications-manager.service'\nimport { UsersManager } from '../../../applications/users/services/users-manager.service'\nimport { Cache } from '../../../infrastructure/cache/services/cache.service'\nimport { AuthMethod2FA } from './auth-method-two-fa.service'\n\ndescribe(AuthMethod2FA.name, () => {\n  let service: AuthMethod2FA\n\n  beforeAll(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthMethod2FA,\n        { provide: Cache, useValue: {} },\n        { provide: UsersManager, useValue: {} },\n        { provide: NotificationsManager, useValue: {} }\n      ]\n    }).compile()\n\n    service = module.get<AuthMethod2FA>(AuthMethod2FA)\n  })\n\n  it('should be defined', () => {\n    expect(service).toBeDefined()\n  })\n})\n"],"names":["describe","AuthMethod2FA","name","service","beforeAll","module","Test","createTestingModule","providers","provide","Cache","useValue","UsersManager","NotificationsManager","compile","get","it","expect","toBeDefined"],"mappings":"AAAA;;;;CAIC;;;;yBAEmC;6CACC;qCACR;8BACP;wCACQ;AAE9BA,SAASC,qCAAa,CAACC,IAAI,EAAE;IAC3B,IAAIC;IAEJC,UAAU;QACR,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTP,qCAAa;gBACb;oBAAEQ,SAASC,mBAAK;oBAAEC,UAAU,CAAC;gBAAE;gBAC/B;oBAAEF,SAASG,iCAAY;oBAAED,UAAU,CAAC;gBAAE;gBACtC;oBAAEF,SAASI,iDAAoB;oBAAEF,UAAU,CAAC;gBAAE;aAC/C;QACH,GAAGG,OAAO;QAEVX,UAAUE,OAAOU,GAAG,CAAgBd,qCAAa;IACnD;IAEAe,GAAG,qBAAqB;QACtBC,OAAOd,SAASe,WAAW;IAC7B;AACF"}
+{"version":3,"sources":["../../../../../backend/src/authentication/services/auth-methods/auth-method-two-fa.service.spec.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { HttpException, HttpStatus } from '@nestjs/common'\nimport { Test, TestingModule } from '@nestjs/testing'\nimport { Totp } from 'time2fa'\nimport { NotificationsManager } from '../../../applications/notifications/services/notifications-manager.service'\nimport { UserModel } from '../../../applications/users/models/user.model'\nimport { UsersManager } from '../../../applications/users/services/users-manager.service'\nimport { Cache } from '../../../infrastructure/cache/services/cache.service'\nimport { TwoFaVerifyDto, TwoFaVerifyWithPasswordDto } from '../../dto/two-fa-verify.dto'\nimport { FastifyAuthenticatedRequest } from '../../interfaces/auth-request.interface'\nimport { decryptSecret, encryptSecret } from '../../utils/crypt-secret'\nimport { AuthMethod2FA } from './auth-method-two-fa.service'\n\njest.mock('../../utils/crypt-secret')\njest.mock('../../../common/qrcode')\n\ndescribe(AuthMethod2FA.name, () => {\n  let service: AuthMethod2FA\n  let cache: jest.Mocked<Cache>\n  let usersManager: jest.Mocked<UsersManager>\n  let notificationsManager: jest.Mocked<NotificationsManager>\n\n  const mockUser: Partial<UserModel> = {\n    id: 1,\n    login: 'testuser',\n    email: 'test@example.com',\n    secrets: {\n      twoFaSecret: 'encrypted-secret',\n      recoveryCodes: ['encrypted-code-1', 'encrypted-code-2']\n    }\n  }\n\n  const mockRequest: Partial<FastifyAuthenticatedRequest> = {\n    user: { id: 1, login: 'testuser' } as any,\n    ip: '127.0.0.1',\n    headers: { 'user-agent': 'test-agent' }\n  }\n\n  beforeEach(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [\n        AuthMethod2FA,\n        {\n          provide: Cache,\n          useValue: {\n            get: jest.fn(),\n            set: jest.fn()\n          }\n        },\n        {\n          provide: UsersManager,\n          useValue: {\n            fromUserId: jest.fn(),\n            validateUserAccess: jest.fn(),\n            compareUserPassword: jest.fn(),\n            updateAccesses: jest.fn().mockResolvedValue(undefined),\n            updateSecrets: jest.fn()\n          }\n        },\n        {\n          provide: NotificationsManager,\n          useValue: {\n            sendEmailNotification: jest.fn().mockResolvedValue(undefined)\n          }\n        }\n      ]\n    }).compile()\n\n    module.useLogger(['fatal'])\n    service = module.get<AuthMethod2FA>(AuthMethod2FA)\n    cache = module.get(Cache)\n    usersManager = module.get(UsersManager)\n    notificationsManager = module.get(NotificationsManager)\n    ;(encryptSecret as jest.Mock).mockImplementation((secret: string) => `encrypted-${secret}`)\n    ;(decryptSecret as jest.Mock).mockImplementation((secret: string) => secret.replace('encrypted-', ''))\n\n    const { qrcodeToDataURL } = await import('../../../common/qrcode')\n    ;(qrcodeToDataURL as jest.Mock).mockReturnValue('data:image/png;base64,mock')\n  })\n\n  afterEach(() => {\n    jest.clearAllMocks()\n  })\n\n  it('should be defined', () => {\n    expect(service).toBeDefined()\n  })\n\n  describe('initTwoFactor', () => {\n    it('should generate secret and QR code and store in cache', async () => {\n      const result = await service.initTwoFactor(mockUser as UserModel)\n\n      expect(result).toHaveProperty('secret')\n      expect(result).toHaveProperty('qrDataUrl')\n      expect(result.qrDataUrl).toBe('data:image/png;base64,mock')\n      expect(cache.set).toHaveBeenCalledWith(`auth-2fa-pending-user-${mockUser.id}`, expect.any(String), 300)\n    })\n  })\n\n  describe('enableTwoFactor', () => {\n    const enableDto: TwoFaVerifyWithPasswordDto = {\n      code: '123456',\n      password: 'password123',\n      isRecoveryCode: false\n    }\n\n    it('should throw error if secret has expired', async () => {\n      cache.get.mockResolvedValue(null)\n\n      await expect(service.enableTwoFactor(enableDto, mockRequest as FastifyAuthenticatedRequest)).rejects.toThrow(\n        new HttpException('The secret has expired', HttpStatus.BAD_REQUEST)\n      )\n    })\n\n    it('should throw error if verification fails', async () => {\n      cache.get.mockResolvedValue('encrypted-secret')\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: false, message: 'Invalid code' })\n\n      await expect(service.enableTwoFactor(enableDto, mockRequest as FastifyAuthenticatedRequest)).rejects.toThrow(\n        new HttpException('Invalid code', HttpStatus.FORBIDDEN)\n      )\n    })\n\n    it('should throw error if password is incorrect', async () => {\n      cache.get.mockResolvedValue('encrypted-secret')\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n      usersManager.compareUserPassword.mockResolvedValue(false)\n\n      await expect(service.enableTwoFactor(enableDto, mockRequest as FastifyAuthenticatedRequest)).rejects.toThrow(\n        new HttpException('Incorrect code or password', HttpStatus.BAD_REQUEST)\n      )\n    })\n\n    it('should enable 2FA and return recovery codes on success', async () => {\n      cache.get.mockResolvedValue('encrypted-secret')\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n      usersManager.compareUserPassword.mockResolvedValue(true)\n\n      const result = await service.enableTwoFactor(enableDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(true)\n      expect(result.recoveryCodes).toHaveLength(5)\n      expect(usersManager.updateSecrets).toHaveBeenCalledWith(mockUser.id, {\n        twoFaSecret: 'encrypted-secret',\n        recoveryCodes: expect.any(Array)\n      })\n      expect(notificationsManager.sendEmailNotification).toHaveBeenCalledWith([mockRequest.user], {\n        app: 'auth_2fa',\n        event: 'Two-factor authentication (2FA) on your account has been enabled',\n        element: 'test-agent',\n        url: '127.0.0.1'\n      })\n    })\n  })\n\n  describe('disableTwoFactor', () => {\n    const disableDto: TwoFaVerifyWithPasswordDto = {\n      code: '123456',\n      password: 'password123',\n      isRecoveryCode: false\n    }\n\n    it('should throw error if verification fails', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: false, message: 'Invalid code' })\n\n      await expect(service.disableTwoFactor(disableDto, mockRequest as FastifyAuthenticatedRequest)).rejects.toThrow(\n        new HttpException('Invalid code', HttpStatus.FORBIDDEN)\n      )\n    })\n\n    it('should throw error if password is incorrect', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n      usersManager.compareUserPassword.mockResolvedValue(false)\n\n      await expect(service.disableTwoFactor(disableDto, mockRequest as FastifyAuthenticatedRequest)).rejects.toThrow(\n        new HttpException('Incorrect code or password', HttpStatus.BAD_REQUEST)\n      )\n    })\n\n    it('should disable 2FA on success', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n      usersManager.compareUserPassword.mockResolvedValue(true)\n\n      const result = await service.disableTwoFactor(disableDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(true)\n      expect(usersManager.updateSecrets).toHaveBeenCalledWith(mockUser.id, {\n        twoFaSecret: undefined,\n        recoveryCodes: undefined\n      })\n      expect(notificationsManager.sendEmailNotification).toHaveBeenCalledWith([mockRequest.user], {\n        app: 'auth_2fa',\n        event: 'Two-factor authentication (2FA) on your account has been disabled',\n        element: 'test-agent',\n        url: '127.0.0.1'\n      })\n    })\n  })\n\n  describe('verify', () => {\n    const verifyDto: TwoFaVerifyDto = {\n      code: '123456',\n      isRecoveryCode: false\n    }\n\n    it('should verify 2FA code successfully', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n\n      const result = await service.verify(verifyDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(true)\n      expect(usersManager.updateAccesses).toHaveBeenCalledWith(mockUser, mockRequest.ip, true, true)\n    })\n\n    it('should verify recovery code successfully', async () => {\n      const recoveryDto: TwoFaVerifyDto = { code: 'code-1', isRecoveryCode: true }\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      usersManager.updateSecrets.mockResolvedValue(undefined)\n\n      await service.verify(recoveryDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(usersManager.updateSecrets).toHaveBeenCalled()\n    })\n\n    it('should fail when recovery codes are empty', async () => {\n      const recoveryDto: TwoFaVerifyDto = { code: 'code-1', isRecoveryCode: true }\n      const userWithoutCodes = { ...mockUser, secrets: { ...mockUser.secrets, recoveryCodes: [] } }\n      usersManager.fromUserId.mockResolvedValue(userWithoutCodes as UserModel)\n\n      const result = await service.verify(recoveryDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Invalid code')\n    })\n\n    it('should fail when recovery code does not match', async () => {\n      const recoveryDto: TwoFaVerifyDto = { code: 'wrong-code', isRecoveryCode: true }\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n\n      const result = await service.verify(recoveryDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Invalid code')\n    })\n\n    it('should handle errors during recovery code validation', async () => {\n      const recoveryDto: TwoFaVerifyDto = { code: 'code-1', isRecoveryCode: true }\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      usersManager.updateSecrets.mockRejectedValue(new Error())\n\n      const result = await service.verify(recoveryDto, mockRequest as FastifyAuthenticatedRequest)\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Invalid code')\n    })\n\n    it('should return user when fromLogin is true', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n      jest.spyOn(service, 'validateTwoFactorCode').mockReturnValue({ success: true, message: '' })\n\n      const result = await service.verify(verifyDto, mockRequest as FastifyAuthenticatedRequest, true)\n\n      expect(Array.isArray(result)).toBe(true)\n      expect(result[0].success).toBe(true)\n      expect(result[1]).toBe(mockUser)\n    })\n  })\n\n  describe('adminResetUserTwoFa', () => {\n    it('should reset user 2FA successfully', async () => {\n      usersManager.updateSecrets.mockResolvedValue(undefined)\n\n      const result = await service.adminResetUserTwoFa(1)\n\n      expect(result.success).toBe(true)\n      expect(usersManager.updateSecrets).toHaveBeenCalledWith(1, {\n        twoFaSecret: undefined,\n        recoveryCodes: undefined\n      })\n    })\n\n    it('should handle errors during reset', async () => {\n      usersManager.updateSecrets.mockRejectedValue(new Error('Database error'))\n\n      const result = await service.adminResetUserTwoFa(1)\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Database error')\n    })\n  })\n\n  describe('loadUser', () => {\n    it('should load and validate user successfully', async () => {\n      usersManager.fromUserId.mockResolvedValue(mockUser as UserModel)\n\n      const result = await service.loadUser(1, '127.0.0.1')\n\n      expect(result).toBe(mockUser)\n      expect(usersManager.validateUserAccess).toHaveBeenCalledWith(mockUser, '127.0.0.1')\n    })\n\n    it('should throw error if user not found', async () => {\n      usersManager.fromUserId.mockResolvedValue(null)\n\n      await expect(service.loadUser(1, '127.0.0.1')).rejects.toThrow(new HttpException('User not found', HttpStatus.NOT_FOUND))\n    })\n  })\n\n  describe('verifyUserPassword', () => {\n    it('should verify password successfully', async () => {\n      usersManager.compareUserPassword.mockResolvedValue(true)\n\n      await expect(service.verifyUserPassword(mockUser as UserModel, 'password123', '127.0.0.1')).resolves.not.toThrow()\n    })\n\n    it('should throw error if password is incorrect', async () => {\n      usersManager.compareUserPassword.mockResolvedValue(false)\n\n      await expect(service.verifyUserPassword(mockUser as UserModel, 'wrong-password', '127.0.0.1')).rejects.toThrow(\n        new HttpException('Incorrect code or password', HttpStatus.BAD_REQUEST)\n      )\n      expect(usersManager.updateAccesses).toHaveBeenCalledWith(mockUser, '127.0.0.1', false, true)\n    })\n  })\n\n  describe('validateTwoFactorCode', () => {\n    it('should validate code successfully', () => {\n      jest.spyOn(Totp, 'validate').mockReturnValue(true)\n\n      const result = service.validateTwoFactorCode('123456', 'encrypted-secret')\n\n      expect(result.success).toBe(true)\n      expect(result.message).toBe('')\n    })\n\n    it('should fail validation for incorrect code', () => {\n      jest.spyOn(Totp, 'validate').mockReturnValue(false)\n\n      const result = service.validateTwoFactorCode('wrong-code', 'encrypted-secret')\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Incorrect code or password')\n    })\n\n    it('should return error if secret is not provided', () => {\n      const result = service.validateTwoFactorCode('123456', '')\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Incorrect code or password')\n    })\n\n    it('should handle validation errors', () => {\n      jest.spyOn(Totp, 'validate').mockImplementation(() => {\n        throw new Error('Validation error')\n      })\n\n      const result = service.validateTwoFactorCode('123456', 'encrypted-secret')\n\n      expect(result.success).toBe(false)\n      expect(result.message).toBe('Validation error')\n    })\n  })\n})\n"],"names":["jest","mock","describe","AuthMethod2FA","name","service","cache","usersManager","notificationsManager","mockUser","id","login","email","secrets","twoFaSecret","recoveryCodes","mockRequest","user","ip","headers","beforeEach","module","Test","createTestingModule","providers","provide","Cache","useValue","get","fn","set","UsersManager","fromUserId","validateUserAccess","compareUserPassword","updateAccesses","mockResolvedValue","undefined","updateSecrets","NotificationsManager","sendEmailNotification","compile","useLogger","encryptSecret","mockImplementation","secret","decryptSecret","replace","qrcodeToDataURL","mockReturnValue","afterEach","clearAllMocks","it","expect","toBeDefined","result","initTwoFactor","toHaveProperty","qrDataUrl","toBe","toHaveBeenCalledWith","any","String","enableDto","code","password","isRecoveryCode","enableTwoFactor","rejects","toThrow","HttpException","HttpStatus","BAD_REQUEST","spyOn","success","message","FORBIDDEN","toHaveLength","Array","app","event","element","url","disableDto","disableTwoFactor","verifyDto","verify","recoveryDto","toHaveBeenCalled","userWithoutCodes","mockRejectedValue","Error","isArray","adminResetUserTwoFa","loadUser","NOT_FOUND","verifyUserPassword","resolves","not","Totp","validateTwoFactorCode"],"mappings":"AAAA;;;;CAIC;;;;wBAEyC;yBACN;yBACf;6CACgB;qCAER;8BACP;6BAGuB;wCACf;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE9BA,KAAKC,IAAI,CAAC;AACVD,KAAKC,IAAI,CAAC;AAEVC,SAASC,qCAAa,CAACC,IAAI,EAAE;IAC3B,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IACJ,IAAIC;IAEJ,MAAMC,WAA+B;QACnCC,IAAI;QACJC,OAAO;QACPC,OAAO;QACPC,SAAS;YACPC,aAAa;YACbC,eAAe;gBAAC;gBAAoB;aAAmB;QACzD;IACF;IAEA,MAAMC,cAAoD;QACxDC,MAAM;YAAEP,IAAI;YAAGC,OAAO;QAAW;QACjCO,IAAI;QACJC,SAAS;YAAE,cAAc;QAAa;IACxC;IAEAC,WAAW;QACT,MAAMC,SAAwB,MAAMC,aAAI,CAACC,mBAAmB,CAAC;YAC3DC,WAAW;gBACTrB,qCAAa;gBACb;oBACEsB,SAASC,mBAAK;oBACdC,UAAU;wBACRC,KAAK5B,KAAK6B,EAAE;wBACZC,KAAK9B,KAAK6B,EAAE;oBACd;gBACF;gBACA;oBACEJ,SAASM,iCAAY;oBACrBJ,UAAU;wBACRK,YAAYhC,KAAK6B,EAAE;wBACnBI,oBAAoBjC,KAAK6B,EAAE;wBAC3BK,qBAAqBlC,KAAK6B,EAAE;wBAC5BM,gBAAgBnC,KAAK6B,EAAE,GAAGO,iBAAiB,CAACC;wBAC5CC,eAAetC,KAAK6B,EAAE;oBACxB;gBACF;gBACA;oBACEJ,SAASc,iDAAoB;oBAC7BZ,UAAU;wBACRa,uBAAuBxC,KAAK6B,EAAE,GAAGO,iBAAiB,CAACC;oBACrD;gBACF;aACD;QACH,GAAGI,OAAO;QAEVpB,OAAOqB,SAAS,CAAC;YAAC;SAAQ;QAC1BrC,UAAUgB,OAAOO,GAAG,CAAgBzB,qCAAa;QACjDG,QAAQe,OAAOO,GAAG,CAACF,mBAAK;QACxBnB,eAAec,OAAOO,GAAG,CAACG,iCAAY;QACtCvB,uBAAuBa,OAAOO,GAAG,CAACW,iDAAoB;QACpDI,0BAAa,CAAeC,kBAAkB,CAAC,CAACC,SAAmB,CAAC,UAAU,EAAEA,QAAQ;QACxFC,0BAAa,CAAeF,kBAAkB,CAAC,CAACC,SAAmBA,OAAOE,OAAO,CAAC,cAAc;QAElG,MAAM,EAAEC,eAAe,EAAE,GAAG,MAAM,mEAAA,QAAO;QACvCA,gBAA8BC,eAAe,CAAC;IAClD;IAEAC,UAAU;QACRlD,KAAKmD,aAAa;IACpB;IAEAC,GAAG,qBAAqB;QACtBC,OAAOhD,SAASiD,WAAW;IAC7B;IAEApD,SAAS,iBAAiB;QACxBkD,GAAG,yDAAyD;YAC1D,MAAMG,SAAS,MAAMlD,QAAQmD,aAAa,CAAC/C;YAE3C4C,OAAOE,QAAQE,cAAc,CAAC;YAC9BJ,OAAOE,QAAQE,cAAc,CAAC;YAC9BJ,OAAOE,OAAOG,SAAS,EAAEC,IAAI,CAAC;YAC9BN,OAAO/C,MAAMwB,GAAG,EAAE8B,oBAAoB,CAAC,CAAC,sBAAsB,EAAEnD,SAASC,EAAE,EAAE,EAAE2C,OAAOQ,GAAG,CAACC,SAAS;QACrG;IACF;IAEA5D,SAAS,mBAAmB;QAC1B,MAAM6D,YAAwC;YAC5CC,MAAM;YACNC,UAAU;YACVC,gBAAgB;QAClB;QAEAd,GAAG,4CAA4C;YAC7C9C,MAAMsB,GAAG,CAACQ,iBAAiB,CAAC;YAE5B,MAAMiB,OAAOhD,QAAQ8D,eAAe,CAACJ,WAAW/C,cAA6CoD,OAAO,CAACC,OAAO,CAC1G,IAAIC,qBAAa,CAAC,0BAA0BC,kBAAU,CAACC,WAAW;QAEtE;QAEApB,GAAG,4CAA4C;YAC7C9C,MAAMsB,GAAG,CAACQ,iBAAiB,CAAC;YAC5B7B,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAOC,SAAS;YAAe;YAEvG,MAAMtB,OAAOhD,QAAQ8D,eAAe,CAACJ,WAAW/C,cAA6CoD,OAAO,CAACC,OAAO,CAC1G,IAAIC,qBAAa,CAAC,gBAAgBC,kBAAU,CAACK,SAAS;QAE1D;QAEAxB,GAAG,+CAA+C;YAChD9C,MAAMsB,GAAG,CAACQ,iBAAiB,CAAC;YAC5B7B,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAC1FpE,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMiB,OAAOhD,QAAQ8D,eAAe,CAACJ,WAAW/C,cAA6CoD,OAAO,CAACC,OAAO,CAC1G,IAAIC,qBAAa,CAAC,8BAA8BC,kBAAU,CAACC,WAAW;QAE1E;QAEApB,GAAG,0DAA0D;YAC3D9C,MAAMsB,GAAG,CAACQ,iBAAiB,CAAC;YAC5B7B,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAC1FpE,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMmB,SAAS,MAAMlD,QAAQ8D,eAAe,CAACJ,WAAW/C;YAExDqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOxC,aAAa,EAAE8D,YAAY,CAAC;YAC1CxB,OAAO9C,aAAa+B,aAAa,EAAEsB,oBAAoB,CAACnD,SAASC,EAAE,EAAE;gBACnEI,aAAa;gBACbC,eAAesC,OAAOQ,GAAG,CAACiB;YAC5B;YACAzB,OAAO7C,qBAAqBgC,qBAAqB,EAAEoB,oBAAoB,CAAC;gBAAC5C,YAAYC,IAAI;aAAC,EAAE;gBAC1F8D,KAAK;gBACLC,OAAO;gBACPC,SAAS;gBACTC,KAAK;YACP;QACF;IACF;IAEAhF,SAAS,oBAAoB;QAC3B,MAAMiF,aAAyC;YAC7CnB,MAAM;YACNC,UAAU;YACVC,gBAAgB;QAClB;QAEAd,GAAG,4CAA4C;YAC7C7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAOC,SAAS;YAAe;YAEvG,MAAMtB,OAAOhD,QAAQ+E,gBAAgB,CAACD,YAAYnE,cAA6CoD,OAAO,CAACC,OAAO,CAC5G,IAAIC,qBAAa,CAAC,gBAAgBC,kBAAU,CAACK,SAAS;QAE1D;QAEAxB,GAAG,+CAA+C;YAChD7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAC1FpE,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMiB,OAAOhD,QAAQ+E,gBAAgB,CAACD,YAAYnE,cAA6CoD,OAAO,CAACC,OAAO,CAC5G,IAAIC,qBAAa,CAAC,8BAA8BC,kBAAU,CAACC,WAAW;QAE1E;QAEApB,GAAG,iCAAiC;YAClC7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAC1FpE,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMmB,SAAS,MAAMlD,QAAQ+E,gBAAgB,CAACD,YAAYnE;YAE1DqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAO9C,aAAa+B,aAAa,EAAEsB,oBAAoB,CAACnD,SAASC,EAAE,EAAE;gBACnEI,aAAauB;gBACbtB,eAAesB;YACjB;YACAgB,OAAO7C,qBAAqBgC,qBAAqB,EAAEoB,oBAAoB,CAAC;gBAAC5C,YAAYC,IAAI;aAAC,EAAE;gBAC1F8D,KAAK;gBACLC,OAAO;gBACPC,SAAS;gBACTC,KAAK;YACP;QACF;IACF;IAEAhF,SAAS,UAAU;QACjB,MAAMmF,YAA4B;YAChCrB,MAAM;YACNE,gBAAgB;QAClB;QAEAd,GAAG,uCAAuC;YACxC7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAE1F,MAAMpB,SAAS,MAAMlD,QAAQiF,MAAM,CAACD,WAAWrE;YAE/CqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAO9C,aAAa4B,cAAc,EAAEyB,oBAAoB,CAACnD,UAAUO,YAAYE,EAAE,EAAE,MAAM;QAC3F;QAEAkC,GAAG,4CAA4C;YAC7C,MAAMmC,cAA8B;gBAAEvB,MAAM;gBAAUE,gBAAgB;YAAK;YAC3E3D,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CF,aAAa+B,aAAa,CAACF,iBAAiB,CAACC;YAE7C,MAAMhC,QAAQiF,MAAM,CAACC,aAAavE;YAElCqC,OAAO9C,aAAa+B,aAAa,EAAEkD,gBAAgB;QACrD;QAEApC,GAAG,6CAA6C;YAC9C,MAAMmC,cAA8B;gBAAEvB,MAAM;gBAAUE,gBAAgB;YAAK;YAC3E,MAAMuB,mBAAmB;gBAAE,GAAGhF,QAAQ;gBAAEI,SAAS;oBAAE,GAAGJ,SAASI,OAAO;oBAAEE,eAAe,EAAE;gBAAC;YAAE;YAC5FR,aAAayB,UAAU,CAACI,iBAAiB,CAACqD;YAE1C,MAAMlC,SAAS,MAAMlD,QAAQiF,MAAM,CAACC,aAAavE;YAEjDqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,iDAAiD;YAClD,MAAMmC,cAA8B;gBAAEvB,MAAM;gBAAcE,gBAAgB;YAAK;YAC/E3D,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAE1C,MAAM8C,SAAS,MAAMlD,QAAQiF,MAAM,CAACC,aAAavE;YAEjDqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,wDAAwD;YACzD,MAAMmC,cAA8B;gBAAEvB,MAAM;gBAAUE,gBAAgB;YAAK;YAC3E3D,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CF,aAAa+B,aAAa,CAACoD,iBAAiB,CAAC,IAAIC;YAEjD,MAAMpC,SAAS,MAAMlD,QAAQiF,MAAM,CAACC,aAAavE;YAEjDqC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,6CAA6C;YAC9C7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAC1CT,KAAKyE,KAAK,CAACpE,SAAS,yBAAyB4C,eAAe,CAAC;gBAAEyB,SAAS;gBAAMC,SAAS;YAAG;YAE1F,MAAMpB,SAAS,MAAMlD,QAAQiF,MAAM,CAACD,WAAWrE,aAA4C;YAE3FqC,OAAOyB,MAAMc,OAAO,CAACrC,SAASI,IAAI,CAAC;YACnCN,OAAOE,MAAM,CAAC,EAAE,CAACmB,OAAO,EAAEf,IAAI,CAAC;YAC/BN,OAAOE,MAAM,CAAC,EAAE,EAAEI,IAAI,CAAClD;QACzB;IACF;IAEAP,SAAS,uBAAuB;QAC9BkD,GAAG,sCAAsC;YACvC7C,aAAa+B,aAAa,CAACF,iBAAiB,CAACC;YAE7C,MAAMkB,SAAS,MAAMlD,QAAQwF,mBAAmB,CAAC;YAEjDxC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAO9C,aAAa+B,aAAa,EAAEsB,oBAAoB,CAAC,GAAG;gBACzD9C,aAAauB;gBACbtB,eAAesB;YACjB;QACF;QAEAe,GAAG,qCAAqC;YACtC7C,aAAa+B,aAAa,CAACoD,iBAAiB,CAAC,IAAIC,MAAM;YAEvD,MAAMpC,SAAS,MAAMlD,QAAQwF,mBAAmB,CAAC;YAEjDxC,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;IACF;IAEAzD,SAAS,YAAY;QACnBkD,GAAG,8CAA8C;YAC/C7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC3B;YAE1C,MAAM8C,SAAS,MAAMlD,QAAQyF,QAAQ,CAAC,GAAG;YAEzCzC,OAAOE,QAAQI,IAAI,CAAClD;YACpB4C,OAAO9C,aAAa0B,kBAAkB,EAAE2B,oBAAoB,CAACnD,UAAU;QACzE;QAEA2C,GAAG,wCAAwC;YACzC7C,aAAayB,UAAU,CAACI,iBAAiB,CAAC;YAE1C,MAAMiB,OAAOhD,QAAQyF,QAAQ,CAAC,GAAG,cAAc1B,OAAO,CAACC,OAAO,CAAC,IAAIC,qBAAa,CAAC,kBAAkBC,kBAAU,CAACwB,SAAS;QACzH;IACF;IAEA7F,SAAS,sBAAsB;QAC7BkD,GAAG,uCAAuC;YACxC7C,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMiB,OAAOhD,QAAQ2F,kBAAkB,CAACvF,UAAuB,eAAe,cAAcwF,QAAQ,CAACC,GAAG,CAAC7B,OAAO;QAClH;QAEAjB,GAAG,+CAA+C;YAChD7C,aAAa2B,mBAAmB,CAACE,iBAAiB,CAAC;YAEnD,MAAMiB,OAAOhD,QAAQ2F,kBAAkB,CAACvF,UAAuB,kBAAkB,cAAc2D,OAAO,CAACC,OAAO,CAC5G,IAAIC,qBAAa,CAAC,8BAA8BC,kBAAU,CAACC,WAAW;YAExEnB,OAAO9C,aAAa4B,cAAc,EAAEyB,oBAAoB,CAACnD,UAAU,aAAa,OAAO;QACzF;IACF;IAEAP,SAAS,yBAAyB;QAChCkD,GAAG,qCAAqC;YACtCpD,KAAKyE,KAAK,CAAC0B,aAAI,EAAE,YAAYlD,eAAe,CAAC;YAE7C,MAAMM,SAASlD,QAAQ+F,qBAAqB,CAAC,UAAU;YAEvD/C,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,6CAA6C;YAC9CpD,KAAKyE,KAAK,CAAC0B,aAAI,EAAE,YAAYlD,eAAe,CAAC;YAE7C,MAAMM,SAASlD,QAAQ+F,qBAAqB,CAAC,cAAc;YAE3D/C,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,iDAAiD;YAClD,MAAMG,SAASlD,QAAQ+F,qBAAqB,CAAC,UAAU;YAEvD/C,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;QAEAP,GAAG,mCAAmC;YACpCpD,KAAKyE,KAAK,CAAC0B,aAAI,EAAE,YAAYvD,kBAAkB,CAAC;gBAC9C,MAAM,IAAI+C,MAAM;YAClB;YAEA,MAAMpC,SAASlD,QAAQ+F,qBAAqB,CAAC,UAAU;YAEvD/C,OAAOE,OAAOmB,OAAO,EAAEf,IAAI,CAAC;YAC5BN,OAAOE,OAAOoB,OAAO,EAAEhB,IAAI,CAAC;QAC9B;IACF;AACF"}

package/server/configuration/config.environment.js

@@ -32,7 +32,11 @@ const _configvalidation = require("./config.validation");
 const configuration = loadConfiguration();
 const serverConfig = {
     twoFaEnabled: configuration.auth.mfa.totp.enabled,
-    mailServerEnabled: !!configuration.mail?.host
+    mailServerEnabled: !!configuration.mail?.host,
+    fileEditors: {
+        collabora: configuration.applications.files.collabora.enabled,
+        onlyoffice: configuration.applications.files.onlyoffice.enabled
+    }
 };
 const exportConfiguration = (reload = false)=>reload ? loadConfiguration() : configuration;
 function loadConfiguration() {

package/server/configuration/config.environment.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/configuration/config.environment.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { join } from 'node:path'\nimport { AuthTokenAccessConfig, AuthTokenRefreshConfig } from '../authentication/auth.config'\nimport { ACCESS_KEY, CSRF_KEY, TWO_FA_VERIFY_EXPIRATION, WS_KEY } from '../authentication/constants/auth'\nimport { TOKEN_TYPE } from '../authentication/interfaces/token.interface'\nimport { transformAndValidate } from '../common/functions'\nimport { ServerConfig } from './config.interfaces'\nimport { configLoader } from './config.loader'\nimport { GlobalConfig } from './config.validation'\n\nexport const configuration: GlobalConfig = loadConfiguration()\nexport const serverConfig: ServerConfig = { twoFaEnabled: configuration.auth.mfa.totp.enabled, mailServerEnabled: !!configuration.mail?.host }\nexport const exportConfiguration: (reload?: boolean) => GlobalConfig = (reload = false) => (reload ? loadConfiguration() : configuration)\n\nfunction loadConfiguration(): GlobalConfig {\n  const config: GlobalConfig = configLoader()\n  // AUTHENTICATION\n  // CSRF & WS & 2FA settings\n  config.auth.token[TOKEN_TYPE.CSRF] = { ...config.auth.token[TOKEN_TYPE.REFRESH], name: CSRF_KEY } satisfies AuthTokenRefreshConfig\n  config.auth.token[TOKEN_TYPE.WS] = { ...config.auth.token[TOKEN_TYPE.REFRESH], name: WS_KEY } satisfies AuthTokenRefreshConfig\n  config.auth.token[TOKEN_TYPE.ACCESS_2FA] = {\n    ...config.auth.token[TOKEN_TYPE.ACCESS],\n    name: ACCESS_KEY,\n    expiration: TWO_FA_VERIFY_EXPIRATION\n  } satisfies AuthTokenAccessConfig\n  config.auth.token[TOKEN_TYPE.CSRF_2FA] = {\n    ...config.auth.token[TOKEN_TYPE.CSRF],\n    expiration: TWO_FA_VERIFY_EXPIRATION\n  } satisfies AuthTokenAccessConfig\n  // APPLICATIONS CONFIGURATION\n  // SPACES & FILES\n  if (!config.applications.files.dataPath) {\n    throw new Error('dataPath is not defined in environment.yaml')\n  }\n  config.applications.files.usersPath = join(config.applications.files.dataPath, 'users')\n  config.applications.files.spacesPath = join(config.applications.files.dataPath, 'spaces')\n  config.applications.files.tmpPath = join(config.applications.files.dataPath, 'tmp')\n  return transformAndValidate(GlobalConfig, config, { exposeDefaultValues: true }, { skipMissingProperties: false })\n}\n"],"names":["configuration","exportConfiguration","serverConfig","loadConfiguration","twoFaEnabled","auth","mfa","totp","enabled","mailServerEnabled","mail","host","reload","config","configLoader","token","TOKEN_TYPE","CSRF","REFRESH","name","CSRF_KEY","WS","WS_KEY","ACCESS_2FA","ACCESS","ACCESS_KEY","expiration","TWO_FA_VERIFY_EXPIRATION","CSRF_2FA","applications","files","dataPath","Error","usersPath","join","spacesPath","tmpPath","transformAndValidate","GlobalConfig","exposeDefaultValues","skipMissingProperties"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAWYA;eAAAA;;QAEAC;eAAAA;;QADAC;eAAAA;;;0BAVQ;sBAEkD;gCAC5C;2BACU;8BAER;kCACA;AAEtB,MAAMF,gBAA8BG;AACpC,MAAMD,eAA6B;IAAEE,cAAcJ,cAAcK,IAAI,CAACC,GAAG,CAACC,IAAI,CAACC,OAAO;IAAEC,mBAAmB,CAAC,CAACT,cAAcU,IAAI,EAAEC;AAAK;AACtI,MAAMV,sBAA0D,CAACW,SAAS,KAAK,GAAMA,SAAST,sBAAsBH;AAE3H,SAASG;IACP,MAAMU,SAAuBC,IAAAA,0BAAY;IACzC,iBAAiB;IACjB,2BAA2B;IAC3BD,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACC,IAAI,CAAC,GAAG;QAAE,GAAGJ,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACE,OAAO,CAAC;QAAEC,MAAMC,cAAQ;IAAC;IAChGP,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACK,EAAE,CAAC,GAAG;QAAE,GAAGR,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACE,OAAO,CAAC;QAAEC,MAAMG,YAAM;IAAC;IAC5FT,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACO,UAAU,CAAC,GAAG;QACzC,GAAGV,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACQ,MAAM,CAAC;QACvCL,MAAMM,gBAAU;QAChBC,YAAYC,8BAAwB;IACtC;IACAd,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACY,QAAQ,CAAC,GAAG;QACvC,GAAGf,OAAOR,IAAI,CAACU,KAAK,CAACC,0BAAU,CAACC,IAAI,CAAC;QACrCS,YAAYC,8BAAwB;IACtC;IACA,6BAA6B;IAC7B,iBAAiB;IACjB,IAAI,CAACd,OAAOgB,YAAY,CAACC,KAAK,CAACC,QAAQ,EAAE;QACvC,MAAM,IAAIC,MAAM;IAClB;IACAnB,OAAOgB,YAAY,CAACC,KAAK,CAACG,SAAS,GAAGC,IAAAA,cAAI,EAACrB,OAAOgB,YAAY,CAACC,KAAK,CAACC,QAAQ,EAAE;IAC/ElB,OAAOgB,YAAY,CAACC,KAAK,CAACK,UAAU,GAAGD,IAAAA,cAAI,EAACrB,OAAOgB,YAAY,CAACC,KAAK,CAACC,QAAQ,EAAE;IAChFlB,OAAOgB,YAAY,CAACC,KAAK,CAACM,OAAO,GAAGF,IAAAA,cAAI,EAACrB,OAAOgB,YAAY,CAACC,KAAK,CAACC,QAAQ,EAAE;IAC7E,OAAOM,IAAAA,+BAAoB,EAACC,8BAAY,EAAEzB,QAAQ;QAAE0B,qBAAqB;IAAK,GAAG;QAAEC,uBAAuB;IAAM;AAClH"}
+{"version":3,"sources":["../../../backend/src/configuration/config.environment.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nimport { join } from 'node:path'\nimport { AuthTokenAccessConfig, AuthTokenRefreshConfig } from '../authentication/auth.config'\nimport { ACCESS_KEY, CSRF_KEY, TWO_FA_VERIFY_EXPIRATION, WS_KEY } from '../authentication/constants/auth'\nimport { TOKEN_TYPE } from '../authentication/interfaces/token.interface'\nimport { transformAndValidate } from '../common/functions'\nimport { ServerConfig } from './config.interfaces'\nimport { configLoader } from './config.loader'\nimport { GlobalConfig } from './config.validation'\n\nexport const configuration: GlobalConfig = loadConfiguration()\nexport const serverConfig: ServerConfig = {\n  twoFaEnabled: configuration.auth.mfa.totp.enabled,\n  mailServerEnabled: !!configuration.mail?.host,\n  fileEditors: {\n    collabora: configuration.applications.files.collabora.enabled,\n    onlyoffice: configuration.applications.files.onlyoffice.enabled\n  }\n}\nexport const exportConfiguration: (reload?: boolean) => GlobalConfig = (reload = false) => (reload ? loadConfiguration() : configuration)\n\nfunction loadConfiguration(): GlobalConfig {\n  const config: GlobalConfig = configLoader()\n  // AUTHENTICATION\n  // CSRF & WS & 2FA settings\n  config.auth.token[TOKEN_TYPE.CSRF] = { ...config.auth.token[TOKEN_TYPE.REFRESH], name: CSRF_KEY } satisfies AuthTokenRefreshConfig\n  config.auth.token[TOKEN_TYPE.WS] = { ...config.auth.token[TOKEN_TYPE.REFRESH], name: WS_KEY } satisfies AuthTokenRefreshConfig\n  config.auth.token[TOKEN_TYPE.ACCESS_2FA] = {\n    ...config.auth.token[TOKEN_TYPE.ACCESS],\n    name: ACCESS_KEY,\n    expiration: TWO_FA_VERIFY_EXPIRATION\n  } satisfies AuthTokenAccessConfig\n  config.auth.token[TOKEN_TYPE.CSRF_2FA] = {\n    ...config.auth.token[TOKEN_TYPE.CSRF],\n    expiration: TWO_FA_VERIFY_EXPIRATION\n  } satisfies AuthTokenAccessConfig\n  // APPLICATIONS CONFIGURATION\n  // SPACES & FILES\n  if (!config.applications.files.dataPath) {\n    throw new Error('dataPath is not defined in environment.yaml')\n  }\n  config.applications.files.usersPath = join(config.applications.files.dataPath, 'users')\n  config.applications.files.spacesPath = join(config.applications.files.dataPath, 'spaces')\n  config.applications.files.tmpPath = join(config.applications.files.dataPath, 'tmp')\n  return transformAndValidate(GlobalConfig, config, { exposeDefaultValues: true }, { skipMissingProperties: false })\n}\n"],"names":["configuration","exportConfiguration","serverConfig","loadConfiguration","twoFaEnabled","auth","mfa","totp","enabled","mailServerEnabled","mail","host","fileEditors","collabora","applications","files","onlyoffice","reload","config","configLoader","token","TOKEN_TYPE","CSRF","REFRESH","name","CSRF_KEY","WS","WS_KEY","ACCESS_2FA","ACCESS","ACCESS_KEY","expiration","TWO_FA_VERIFY_EXPIRATION","CSRF_2FA","dataPath","Error","usersPath","join","spacesPath","tmpPath","transformAndValidate","GlobalConfig","exposeDefaultValues","skipMissingProperties"],"mappings":"AAAA;;;;CAIC;;;;;;;;;;;QAWYA;eAAAA;;QASAC;eAAAA;;QARAC;eAAAA;;;0BAVQ;sBAEkD;gCAC5C;2BACU;8BAER;kCACA;AAEtB,MAAMF,gBAA8BG;AACpC,MAAMD,eAA6B;IACxCE,cAAcJ,cAAcK,IAAI,CAACC,GAAG,CAACC,IAAI,CAACC,OAAO;IACjDC,mBAAmB,CAAC,CAACT,cAAcU,IAAI,EAAEC;IACzCC,aAAa;QACXC,WAAWb,cAAcc,YAAY,CAACC,KAAK,CAACF,SAAS,CAACL,OAAO;QAC7DQ,YAAYhB,cAAcc,YAAY,CAACC,KAAK,CAACC,UAAU,CAACR,OAAO;IACjE;AACF;AACO,MAAMP,sBAA0D,CAACgB,SAAS,KAAK,GAAMA,SAASd,sBAAsBH;AAE3H,SAASG;IACP,MAAMe,SAAuBC,IAAAA,0BAAY;IACzC,iBAAiB;IACjB,2BAA2B;IAC3BD,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACC,IAAI,CAAC,GAAG;QAAE,GAAGJ,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACE,OAAO,CAAC;QAAEC,MAAMC,cAAQ;IAAC;IAChGP,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACK,EAAE,CAAC,GAAG;QAAE,GAAGR,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACE,OAAO,CAAC;QAAEC,MAAMG,YAAM;IAAC;IAC5FT,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACO,UAAU,CAAC,GAAG;QACzC,GAAGV,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACQ,MAAM,CAAC;QACvCL,MAAMM,gBAAU;QAChBC,YAAYC,8BAAwB;IACtC;IACAd,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACY,QAAQ,CAAC,GAAG;QACvC,GAAGf,OAAOb,IAAI,CAACe,KAAK,CAACC,0BAAU,CAACC,IAAI,CAAC;QACrCS,YAAYC,8BAAwB;IACtC;IACA,6BAA6B;IAC7B,iBAAiB;IACjB,IAAI,CAACd,OAAOJ,YAAY,CAACC,KAAK,CAACmB,QAAQ,EAAE;QACvC,MAAM,IAAIC,MAAM;IAClB;IACAjB,OAAOJ,YAAY,CAACC,KAAK,CAACqB,SAAS,GAAGC,IAAAA,cAAI,EAACnB,OAAOJ,YAAY,CAACC,KAAK,CAACmB,QAAQ,EAAE;IAC/EhB,OAAOJ,YAAY,CAACC,KAAK,CAACuB,UAAU,GAAGD,IAAAA,cAAI,EAACnB,OAAOJ,YAAY,CAACC,KAAK,CAACmB,QAAQ,EAAE;IAChFhB,OAAOJ,YAAY,CAACC,KAAK,CAACwB,OAAO,GAAGF,IAAAA,cAAI,EAACnB,OAAOJ,YAAY,CAACC,KAAK,CAACmB,QAAQ,EAAE;IAC7E,OAAOM,IAAAA,+BAAoB,EAACC,8BAAY,EAAEvB,QAAQ;QAAEwB,qBAAqB;IAAK,GAAG;QAAEC,uBAAuB;IAAM;AAClH"}

package/server/configuration/config.interfaces.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../backend/src/configuration/config.interfaces.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport interface ServerConfig {\n  twoFaEnabled: boolean\n  mailServerEnabled: boolean\n}\n"],"names":[],"mappings":"AAAA;;;;CAIC"}
+{"version":3,"sources":["../../../backend/src/configuration/config.interfaces.ts"],"sourcesContent":["/*\n * Copyright (C) 2012-2025 Johan Legrand <johan.legrand@sync-in.com>\n * This file is part of Sync-in | The open source file sync and share solution\n * See the LICENSE file for licensing details\n */\n\nexport interface FileEditorProvider {\n  collabora: boolean\n  onlyoffice: boolean\n}\n\nexport interface ServerConfig {\n  twoFaEnabled: boolean\n  mailServerEnabled: boolean\n  fileEditors: FileEditorProvider\n}\n"],"names":[],"mappings":"AAAA;;;;CAIC"}